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In the Specification: 

Replace the paragraph beginning on page 6 line 14 withj: 

Referring now to FIG, 1 , a schematic diagram illustrates a server 

100 used to receive encrypted data from a sending client computer 102 

i 

and transmit encrypted data to a receiving client computer 104 through 

j 

the Internet 106 using shared private keys. The sending client 102 and 

i 

receiving client 104 share their own private key with th$ server 100, but 

! 
I 

do not share their private keys with anyone else. 



eplace the paragraph beginning on page 8 line 6 with: 



FIG. 5 is a block diagram of one embodiment of the non- volatile 
memory module 404 located within the clients 102, 104 jof FIG. 4, The 
non- volatile memory 406 includes an encrypt/ decrypt engine 502 for 

15 encrypting and decrypting data. The encrypt/ decrypt engine 502 can 

I 

also be stored in RAM 404. Excellent results can be obtkined when the 
encrypt/decrypt engine is served up as a Java™ applet to the clients 
102, 104. Tlie Java™ applet can be served up with a wejb page. In 
another form, the encrypt/ decrypt engine can be sent to! the clients 102, 
20 104, and then stored on their hard drive. ; 




the paragraph beginning on page 10 line 3 with:| 
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FIG. 8 is a flowchart of a method illustrating howja user having a 
shared private key passes secure data through a server icomputer over 
the Internet. This method is very similar to the process! described in 
FIGS. 6 and 7. The process begins at step 800. A user having a private 
key shared with the server establishes a session over the Internet with 
the server by requesting a web page at step 802 using a! suitable client. 

At step 804 the server sends a web page form from the ^eb page forms 

i 

database 310 to the client. Next at step 806 the user enters data into the 

i 

web page along with his private key shared with the server. At step 808 
the data is encrypted with the encrypt/ decrypt engine at the client 
computer using the user's private key and then the encrjypted data is 
sent to the server. It is explicitly shown at step 808 thatjthe user's 

; 

private key is the user ? s personal authentication data. Tjhe encryption 

! 
) 

key is formed from the authentication data. Subsequently, the 
authentication data: is NOT sent to the server and it is NQT used for 
authentication per se except in so far as both client and jseryer are able 
to encrypt and decrypt the data using the same key. 



y^^ lace the paragraph beginning on page 10 line 20 witlji: 

After the processing step is completed at step 814 jthe server 

i 

encrypts the processed data using the user's private key that is stored in 
the user private keys database 304 and sends the encrypted data to the 
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client. It is not necessary for the client to be the same client that began 
the process at step 802. The server can be used as an intermediary for 
passing and processing secure data between clients. I 

eplace the paragraph beginning on page 1 1 line 4 with: 




10 



At step 816, the client receives the secure data arid the user enters 
their private key/ At step 818 the encrypted processed #ata is decrypted 

with the user's private key, which is now available to the client, using 

I 

the encrypt/decrypt engine 502. At step 820 the client jean access the 
data or the user can view the data, and at step 822 the process ends. 
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